| CVE-2022-40744 |
IBM Aspera Faspex 5.0.6 is vulnerable to stored cross-site scripting
|
4.8
Medium
|
Feb 2, 2024 |
| CVE-2022-22402 |
IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 8, 2023 |
| CVE-2022-22401 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather or persuade a naive user to supply sensitive information
|
5.9
Medium
|
Sep 8, 2023 |
| CVE-2022-22409 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to gather sensitive information about the web application,…
|
5.3
Medium
|
Sep 8, 2023 |
| CVE-2023-30995 |
IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist…
|
7.5
High
|
Sep 8, 2023 |
| CVE-2023-24965 |
IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor
|
5.8
Medium
|
Sep 8, 2023 |
| CVE-2022-22405 |
IBM Aspera Faspex 5.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly…
|
5.9
Medium
|
Sep 8, 2023 |
| CVE-2023-35906 |
IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls
|
5.3
Medium
|
Sep 5, 2023 |
| CVE-2023-22870 |
IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in…
|
5.9
Medium
|
Sep 5, 2023 |
| CVE-2023-27873 |
IBM Aspera Faspex 4.4.2 could allow a remote authenticated attacker to obtain sensitive credential information using…
|
6.5
Medium
|
Mar 21, 2023 |
| CVE-2023-27874 |
IBM Aspera Faspex 4.4.2 is vulnerable to an XML external entity injection (XXE) attack when processing XML data
|
9.9
Critical
|
Mar 21, 2023 |
| CVE-2023-27871 |
IBM Aspera Faspex 4.4.2 could allow a remote attacker to obtain sensitive credential information for an external user,…
|
7.5
High
|
Mar 21, 2023 |
| CVE-2023-27875 |
IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls
|
7.5
High
|
Mar 16, 2023 |
| CVE-2023-22868 |
IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting
|
5.4
Medium
|
Feb 17, 2023 |
| CVE-2022-47986 |
Exploited
IBM Aspera Faspex Code Execution Vulnerability
|
9.8
Critical
|
Feb 17, 2023 |
| CVE-2022-22497 |
IBM Aspera Faspex 4.4.1 and 5.0.0 could allow unauthorized access due to an incorrectly computed security token
|
7.5
High
|
May 24, 2022 |